Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q0ddFOKRhduPiujiNwJwyDXDm0Q.roa
File: q0ddFOKRhduPiujiNwJwyDXDm0Q.roa (raw, json)
Hash identifier: bHv/yyRGVUUzwnUtnVn4nO+4g9NwiF+YY5KrWTjP2Bo=
Subject key identifier: AB:47:5D:14:E2:91:85:DB:8F:8A:E8:E2:37:02:70:C8:35:C3:9B:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A65F5E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q0ddFOKRhduPiujiNwJwyDXDm0Q.roa
Signing time: Mon 14 Feb 2022 00:09:26 +0000
ROA not before: Mon 14 Feb 2022 00:09:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1785066984 (0x6a65f5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 00:09:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab475d14e29185db8f8ae8e2370270c835c39b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:cf:f2:5c:36:40:8c:82:13:76:be:78:e1:
16:a9:c1:06:12:2e:9f:67:61:6c:71:2b:a2:d3:db:
5e:68:de:1c:a9:33:db:c0:60:7a:7e:bb:52:9f:fb:
82:8d:d9:1f:6c:18:1e:41:e2:a0:26:3e:f9:37:a2:
a5:4e:5b:65:e7:73:14:df:3b:e2:08:5b:b8:8d:12:
c6:25:ce:ef:74:bd:5d:f5:e7:c2:17:49:99:d3:98:
ea:1e:df:d3:0d:42:6a:9c:f4:e8:ed:4f:33:99:e8:
d0:a8:2c:10:d0:a4:86:3d:03:63:df:2a:dc:1f:16:
c6:6c:5a:c5:41:a0:75:f4:4e:d9:b3:78:20:ca:f7:
96:90:d5:b6:6a:47:cc:47:ea:4a:b2:9f:80:00:7d:
cd:18:b6:c8:09:c3:40:a4:37:06:ea:39:bc:06:92:
f9:4e:03:be:96:79:7e:01:67:98:04:81:23:6c:d8:
53:21:05:6d:4c:4f:5b:17:10:ad:83:6a:35:b3:e8:
79:1d:c9:5a:e1:7c:10:66:c0:2f:5b:55:1b:60:00:
42:7b:88:d3:2b:8b:9c:dc:e0:f6:7d:2a:10:2f:e1:
89:6a:26:be:ba:9e:e6:f8:87:f6:ea:0d:99:ca:f3:
a0:09:ff:07:d8:fb:ef:c8:e3:75:f8:fe:06:12:7f:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:47:5D:14:E2:91:85:DB:8F:8A:E8:E2:37:02:70:C8:35:C3:9B:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q0ddFOKRhduPiujiNwJwyDXDm0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:68:7e:9e:41:66:43:f5:ab:a8:37:2b:8a:d3:e1:62:b0:1d:
2f:b0:5a:60:a5:97:12:f9:df:f3:31:bb:e3:36:92:19:aa:09:
44:ba:91:8e:46:6d:6d:d0:ee:95:4b:33:db:9f:86:e7:1a:c2:
3d:01:5a:54:49:5e:a2:eb:1b:dc:77:b5:ba:15:8b:50:99:f8:
54:74:10:31:79:28:df:0b:41:2f:42:e3:ca:02:c8:d5:c8:94:
9b:a3:bb:73:4b:56:9d:a7:ae:69:77:78:63:8a:82:c3:89:60:
b8:d3:05:dd:19:e2:76:85:74:58:83:1d:a5:d3:3d:76:26:2e:
80:da:cd:a6:9f:0b:0e:4d:4d:da:88:12:01:51:81:2e:e0:f6:
57:3f:f5:84:17:4e:25:33:ee:22:0c:6a:0c:ff:6e:99:00:73:
e9:9b:b5:a5:92:4e:0e:fd:01:6b:0d:2f:d8:7c:e5:c7:08:ca:
87:52:e4:c3:c1:fd:7f:81:82:47:e3:34:a3:91:f9:53:e4:24:
09:40:4c:5c:a1:04:da:ef:7d:11:32:06:ae:5a:6c:90:49:71:
2a:e3:1a:05:8a:bf:83:20:73:0e:55:c1:4d:ca:ab:9d:d9:f0:
38:73:2e:59:d9:57:3c:b7:e6:b4:c9:85:8b:53:bb:2a:3d:e3:
98:35:a3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:55:33 2025 by rpki-client